Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ObrwvnuybuX-TCdIyJYF8yRpE7M.roa
File: ObrwvnuybuX-TCdIyJYF8yRpE7M.roa (raw, json)
Hash identifier: ctdZU3BusOf+SUNNRsV3E3G1Z+DU1MZt+5gYWTRs6a8=
Subject key identifier: 39:BA:F0:BE:7B:B2:6E:E5:FE:4C:27:48:C8:96:05:F3:24:69:13:B3
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A05207B761C2B1C63468450F8772509636
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ObrwvnuybuX-TCdIyJYF8yRpE7M.roa
Signing time: Sun 30 Aug 2026 09:37:12 +0000
ROA not before: Sun 30 Aug 2026 09:37:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 195.216.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:07:b7:61:c2:b1:c6:34:68:45:0f:87:72:50:96:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 30 09:37:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39baf0be7bb26ee5fe4c2748c89605f3246913b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7e:f8:76:2d:89:bc:e2:af:2d:ee:67:85:3b:
3f:67:29:b3:fe:98:7d:ec:4e:87:d9:85:7c:b0:3e:
d9:0a:c3:91:0e:d4:f2:96:47:b8:a1:b0:a3:16:a1:
f2:04:a8:3a:25:21:84:98:bf:bd:67:ba:5e:ba:ce:
ea:71:73:2c:d9:69:96:c8:bc:5b:9e:50:d7:eb:86:
07:66:45:19:51:d5:bf:ca:c6:ee:fd:ae:2b:39:1c:
9c:51:14:a4:8e:21:ec:01:6d:62:a0:f0:d7:17:07:
c1:17:ba:40:59:9a:a1:a8:f9:ab:98:01:c0:e0:58:
89:48:cc:f3:73:b4:7d:f9:e9:61:c4:ed:71:69:37:
e1:62:0d:ee:05:4a:7d:4b:7f:20:f8:1a:02:bc:db:
b2:1d:44:b2:53:10:e2:c2:0c:57:d0:e5:d2:6b:e8:
9f:81:bb:3a:84:e4:89:53:5c:0c:01:62:69:6c:13:
aa:ff:33:68:0e:54:c5:61:38:fc:e6:03:c4:54:d1:
4a:a2:bf:08:ab:6b:27:80:a9:ca:3f:2c:dd:68:0a:
a9:86:63:76:fa:aa:ca:91:8e:e1:fd:d0:d7:37:78:
3e:1d:48:f7:81:21:1b:bb:74:5b:75:bb:03:7e:d0:
9f:72:a7:c0:55:52:77:2f:c3:c6:f0:41:5c:1a:49:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BA:F0:BE:7B:B2:6E:E5:FE:4C:27:48:C8:96:05:F3:24:69:13:B3
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ObrwvnuybuX-TCdIyJYF8yRpE7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.172.0/24
Signature Algorithm: sha256WithRSAEncryption
04:09:73:45:02:01:61:b3:6a:bd:ff:1c:ec:38:9c:bf:82:ff:
7b:e5:80:f0:9e:f5:0e:4c:cd:9b:d6:91:92:28:6e:9b:dc:bb:
8a:aa:9b:09:c0:91:fa:b5:6d:df:48:3d:1f:09:e6:3b:09:d3:
18:a6:1f:34:47:71:85:87:29:85:30:dd:e1:4a:1f:36:1c:ba:
ff:47:67:27:76:d1:6e:eb:1d:f4:bb:6c:f9:49:fc:33:65:19:
bb:4d:75:ab:19:6a:e3:18:0f:71:11:21:4e:01:6c:50:50:0e:
e2:63:cc:e3:0b:22:e6:c6:5a:84:ba:1f:2f:fe:42:12:3e:32:
cb:48:a9:57:c4:94:34:c3:fb:e9:1f:a0:01:79:48:91:21:e0:
b4:91:ce:4f:76:8c:40:58:be:f1:46:a4:6a:1d:c1:43:28:33:
70:bd:e6:62:a0:30:84:94:54:f1:29:c9:08:c0:96:9e:a2:36:
69:fd:9d:e7:ea:df:41:86:e5:c6:a7:cd:67:e6:a5:41:bc:38:
e9:e8:ed:3b:20:86:89:8c:1c:e4:04:06:d1:46:74:54:d5:53:
f4:ee:84:c4:a2:c5:04:ca:9d:b8:3e:2d:7e:77:c9:cd:03:e6:
cb:88:1a:9b:ea:27:4b:2a:9c:84:dc:0d:b2:36:8f:b8:cd:fc:
14:c2:d5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:56 2026 by rpki-client